Cookie Policy
Last updated: October 23, 2026
What are cookies?
Cookies are small browser records. This policy also covers localStorage, sessionStorage and IndexedDB, which remember choices, sessions and photos on your device. Necessary storage supports the service and features you request. Optional analytics and advertising require your explicit consent.
Storage inventory
| Name | Provider | Purpose | Duration | Party |
|---|---|---|---|---|
| archythink_consent | ArchyThink | Consent choices, notice version, decision date and previous choices | 6 months before renewal; history remains until site data is cleared | First party · localStorage |
| archythink-ai-consent:<account> | ArchyThink | Remember acknowledgment of the first-upload AI notice while the account record is pending | Until site-data clearance; a newer AI notice version requires acknowledgment | First party · localStorage |
| archai-tokens | ArchyThink | Restore the requested authenticated session | Until sign-out or site-data clearance; token validity is separate | First party · localStorage |
| archythink-session | ArchyThink | Account profile cache and account preferences | Until sign-out or site-data clearance | First party · localStorage |
| archythink-language | ArchyThink | Remember your selected language | Until changed or site-data clearance | First party · localStorage |
| archythink-mode | ArchyThink | Remember the studio mode you select | Until changed or site-data clearance | First party · localStorage |
| archythink-last-studio | ArchyThink | Return to your selected studio | Until changed or site-data clearance | First party · localStorage |
| archythink-favorites | ArchyThink | Save favorites when you use the favorite action | Until removed or site-data clearance | First party · localStorage |
| archythink-last-photo:<tool> | ArchyThink | Restore the photo you selected for this tool | Until replaced, removed or site-data clearance | First party · localStorage |
| archythink-photo-drafts / photos / <tool> | ArchyThink | Keep your selected device photo after refresh; includes :after scopes | Until replaced, removed or site-data clearance | First party · IndexedDB |
| firebaseLocalStorageDb / firebaseLocalStorage / firebase:authUser:* | Google Firebase | Requested sign-in session; initialized only after an authentication action | Until sign-out or site-data clearance | First-party storage · external provider |
| firebase:authUser:*, firebase:persistence:*, firebase:redirectUser:*, firebase:pendingRedirect:*; __sak | Google Firebase | SDK session/redirect fallback and storage availability probe; actual use depends on browser | Persistent localStorage or sessionStorage fallback; probe is removed | First-party storage · external provider |
| sidebar_state | ArchyThink UI | Sidebar preference; defined in UI library, not used by current screens | 7 days if used | First party · cookie |
| Paddle checkout storage | Paddle.com | Payment and fraud prevention only when you start checkout; exact names are provider-controlled | Provider-controlled · [DOLDURULACAK] | Third party · only requested checkout |
Categories and legal bases
Necessary
Required for session security, language, consent records and features you request, including selected photo drafts and checkout you initiate.
Legal basis: providing the service you request; applicable contract, security and legal obligations.
Analytics
Optional measurement of website use and errors. Off until you choose to allow it.
Legal basis: explicit consent. You may withdraw it at any time.
Marketing / Advertising
Optional advertising measurement and pixels. Off until you choose to allow it. No advertising pixel is currently installed.
Legal basis: explicit consent. You may withdraw it at any time.
Service requests and providers
| Provider | Purpose | When | Duration | Party |
|---|---|---|---|---|
| ArchyThink and asset delivery | Pages, scripts, locally served fonts, sample images and translations | When viewing pages | HTTP cache; no app-defined tracking retention | First-party delivery |
| ArchAI · api.archythink.xyz | Account, credits, uploads and requested generation | Authenticated service actions | Server retention: [DOLDURULACAK] | Cross-site first-party service |
| Google Firebase / Google / Apple | Requested authentication and transactional account emails | Only after sign-in or password-reset action | Provider retention: [DOLDURULACAK] | Third party |
| Paddle.com | Checkout, payment, invoices and fraud prevention | Only after purchase action | Provider retention: [DOLDURULACAK] | Third party |
| Returned upload and output hosts | Display the content you upload or generate | Requested content workflow | Host and retention depend on the backend response: [DOLDURULACAK] | Runtime-dependent |
| Lovable optional error reporting | Optional application error diagnostics, gated by analytics consent | Only with analytics consent and an error | Provider retention: [DOLDURULACAK] | Third party when available |
Google Fonts and Unsplash are not contacted by the browser for typography or sample images. Fonts and sample images are served through the site. Authentication and payments contact their providers only when you request those actions. Hosting-injected diagnostics and provider-specific storage require a separate live inventory check.
Change or withdraw your choices
Use Cookie settings, Your privacy choices or the persistent cookie icon. Opening settings does not change your choice. Rejecting or switching a category off stops optional reporting and removes its accessible first-party storage. Your earlier acceptance is kept in the local consent history. Third-party or HttpOnly cookies cannot be deleted by this site; use your browser settings to clear them. Global Privacy Control keeps advertising disabled. Choices are renewed after six months or a policy version change.
International transfers
Google/Firebase may process authentication data in the United States. Paddle processes requested payment data through its infrastructure. Transfer countries, recipient entities and applicable KVKK Article 9 safeguards must be confirmed: [DOLDURULACAK]. Choosing necessary authentication or payment does not authorize optional advertising.
Data controller and contact
PradoTech Yazılım Ltd. · [email protected]
Registered address, company registration details, VERBİS status and formal rights-request procedure: [DOLDURULACAK].